CVE Catalog
CVE-2026-72208
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.19%
9th percentile - higher than 9% of all known CVEs
Summary
In the Linux kernel, a bounds check was added before accessing EA entries in the NTFS filesystem. In ntfs_ea_lookup and ntfs_listxattr, it verifies that there is enough space in the EA entry before accessing the next_entry_offset field.
Risk Assessment
Lack of this check could lead to out-of-bounds read, potentially resulting in information disclosure or system crash.
Recommendation
Apply the kernel update containing this fix as soon as possible.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfs_ea_lookup and ntfs_listxattr, this verifies that there is enough space in the EA entry before accessing the next_entry_offset field of the EA entry.